Security Scan Report: nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 8 domains to perform 46 HTTP transactions. The main domain is nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click and was registered 2 weeks ago.

Submitted URL: https://nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click/products/spravka-ob-otsutstvii-sudimosti-pri-obuchenii-na-5-i-6-razryady-slozhnye-sluchai

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Site sells forged Russian official documents (no-criminal-record certificates, guard qualification papers) from a 12-day-old keyword-stuffed domain reached through 6 cross-domain redirects. Illegal document fraud — avoid and report.

Risk Factors (5)
Sells counterfeit official documents (criminal-record clearance certificates, guard qualification papers)
Very new domain (12 days old) on a disposable, keyword-stuffed hostname
Multiple cross-domain redirects in the funnel
Contact-detail harvesting forms tied to an illicit document service
Advertises '2026 sample' documents and 'promotional' pricing to lure buyers
Domain age information unavailable

Details

Page Title

Купить справка об отсутствии судимости, при обучении на 5 и 6 разряды охранника образца 2026 года в России

Scan Type

public

Domain Name Analysis

Within the .click top-level domain, 'nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click' is registered while skipping any subdomain. Count 57 characters in 'nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs' split between 16 vowels and 39 consonants, plus 2 hyphens. Splitting it apart reveals 19 words: nhc, y, lxx, oh, ran, nik, docs, oh, ran, nik, docs, oh, ran, nik, docs, oh, ran, nik, docs. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nhcylxx-ohrannikdocsohrannikdocsohrannikdocs-ohrannikdocs.click/products/spravka-ob-otsutstvii-sudimosti-pri-obuchenii-na-5-i-6-razryady-slozhnye-sluchai

Page Load Overview

1.17s
Total Load Time
931 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:3,037 chars
Detector Agreement:80%

Website Classification

Primary Category

education learning67% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
67%
blog personal website
65%
government public service
62%
documentation technical
33%
technology software
30%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10145.63.129.127Frankfurt am Main, Hesse, Germany
AS211381Podaon SIA
65.101.71.73Yerevan, Yerevan, Armenia
AS201589edgeam LLC
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
6185.71.67.146Russia
AS43298Storm Networks LLC
687.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
637.18.100.36Russia
AS208677Cloud.ru
467--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15483E66C10B1190E5423D447DA657B0E64637E6FDD215CE4FDAD6298FF83C88BCAA328

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:pe6dIIU7tvIbgulChrRcsQKi3KcYwb9riXQlEtk8qizM:pe15vIbgulCRRe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81616:IUQUEARNcoEai4K0USYABE8ULKwnowHwKaYcCCWikAsAxIwALhFcKhIKlCQAGWCAyYhOwKEAuUIIPKEIomAOvQQB6aFMQAEa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000fffffcffff03
Perceptual Hash:f25e2d5212d62dd2
Difference Hash:cd0618400c1508cb
Wavelet Hash:0000cffffcfce601
Color Hash:#741f93

Scan History

Scan history not available

Unable to load historical scan data